Microsoft Defender Legacy
Microsoft Defender Legacy is an application template in the Endpoint Management category of the Application Catalog. Its card describes it as Microsoft Defender XDR Incidents via Entra Application. Installing it from the form below adds an application to Applications. Its template ID, DefenderATPLegacy, is the one listed on Application Templates.
Menu path: Applications → Install Application → Microsoft Defender Legacy · URL path: /v2/applications/install?template=DefenderATPLegacy
Task guide: Microsoft Defender

Application
The two fields every install form starts with: Instance name names this installation in its URL, and Display name is shown for it on Applications and its details page.
| Field | Type | Required | Default |
|---|---|---|---|
| Instance name | Text | Yes | default |
| Display name | Text | Yes | Default |
Configuration
| Field | Type | Required | Default |
|---|---|---|---|
| Tenant ID | Text | Yes | - |
| Client ID | Text | Yes | - |
| Client Secret | Password | Yes | - |
Install
Install Application installs Microsoft Defender Legacy with the values in the form; Dry run checks them first, without installing (see Dry run); Cancel returns to the catalog without installing. Every template's form shares the shape described under Install Form.